Penetration Tester, Senior

CACI • Mclean, VA

1d • Onsite

About The Position

CACI is seeking a Senior Penetration Tester to join its team in McLean, Virginia. The role works on small project teams planning and executing penetration tests in Windows environments. As a functional member of a cyber red team, the employee identifies creative ways to access customer systems and demonstrates to stakeholders the potential impact of adversarial activity against their networks. The position supports cyber operations programs and national security missions, with opportunities to grow across programs, collaborate with peers, and participate in team-building activities. The role requires an active TS/SCI clearance with polygraph and at least seven years of related work experience or equivalent experience in place of a university degree. The posting describes a regular, full-time position with no stated travel requirement, though it also says the employee may travel in support of operational objectives.

Requirements

• Must have an active TS/SCI clearance with the required polygraph.
• University degree or equivalent experience and a minimum of seven years of related work experience.
• Expertise in Windows penetration-testing tools and techniques.
• Ability to communicate findings clearly through written and oral products.
• Understanding of networking, network components, IP fundamentals, and protocols, including the ability to analyze applications and traffic flows and break down interactions with network devices.
• Understanding of network technologies such as routers, switches, and database servers.
• Experience using network security technologies such as firewalls, proxies, iptables, antivirus solutions, VPNs, and IDS/IPS.
• Proficiency with installation and management of Internet technologies, and developmental knowledge of those technologies.
• Understanding of security implementation and setup for system and networking functions, including encryption methods.
• Understanding of cloud computing platforms and cloud security, including Amazon Web Services, Microsoft Azure, and Google cloud environments.
• Understanding of cellular technology, including device power-on and power-off, SMS, MMS, voice, data, and cellular system functions.
• Understanding of wireless computer networking and RF technology.
• Understanding of operating systems including Windows, macOS, Linux, and mobile operating systems, and how servers and clients are built and secured.
• Understanding and experience in risk analysis and management, information security engineering, and system testing and analysis.
• Proficiency in computer network evaluations and penetration security assessments.
• Proficiency in network vulnerability analysis and penetration testing with commercial tools such as Nmap, Wireshark, Metasploit, Canvas, Kismet, and BackTrack.
• Proficiency in Windows system administration and a basic understanding of Cisco switches and firewalls.
• Working knowledge of Nessus, Nipper, and Nmap.
• Ability to research, analyze, prioritize, problem-solve, synthesize large amounts of data, and handle several tasks concurrently with minimum supervision.
• Excellent interpersonal skills, sound judgment, and good administrative and organizational skills.
• Ability to communicate with people from diverse backgrounds and convey technical information to nontechnical individuals.

Nice To Haves

• Understanding of voice telephony and how PBX systems are configured and function.
• Understanding of voice services such as voicemail and voice portals.
• Understanding of programming, including how code works and is developed.
• Experience supporting and administering cloud products and services.

Responsibilities

• Perform Windows system administration for the sponsor’s Microsoft Windows and Active Directory environment.
• Identify weaknesses and recommend mitigation strategies.
• Draft assessment reports and memoranda regarding vulnerability assessments, risk evaluations, and possible remedies.
• Develop and deliver assessment briefings.
• Participate in technical discussions and collaborate with mission partners through early engagement throughout the life cycle.
• Participate in activities related to assigned work.
• Plan and execute penetration tests in Windows environments as part of a cyber red team.

Benefits

• Bonus compensation plans.
• Paid cyber events and training, including Capture the Flag events.
• Internal Research and Development opportunities.
• Prepaid courses for nationally recognized certification programs.
• Flexible time off benefit.
• Learning resources and learning and development opportunities.
• Competitive compensation and comprehensive benefits, including healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior